Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: sRFF8uXbaFi4iesAG1iwXaXpYPvcXziyYf+cNRTf1LU=
Subject key identifier: DB:01:42:1B:73:0B:26:C6:F6:68:C6:C5:36:DB:2F:F3:B3:FA:A1:1C
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 019A711377A52CC70E9FBE17600E6F69C15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 1442
Signing time: Tue 11 Nov 2025 04:01:32 +0000
Manifest this update: Tue 11 Nov 2025 04:01:32 +0000
Manifest next update: Wed 12 Nov 2025 04:01:32 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: lSEaQxj1f6VfBeg+vIfOBYAas5wknKrVqVEYgIio77Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:77:a5:2c:c7:0e:9f:be:17:60:0e:6f:69:c1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Nov 11 04:01:32 2025 GMT
Not After : Nov 12 04:01:32 2025 GMT
Subject: CN=db01421b730b26c6f668c6c536db2ff3b3faa11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:f9:c8:55:53:b5:23:56:af:2c:57:4e:79:
97:10:1f:72:ce:54:b4:a4:3d:40:2b:1e:dc:9d:b7:
b2:23:06:ee:b2:8d:2c:cd:80:ba:a0:63:6f:91:52:
22:c1:18:c7:10:2a:12:20:1c:f2:ff:b1:91:9e:3f:
76:3e:aa:7a:e8:fc:cb:05:a8:85:21:ee:ec:00:8b:
75:5b:b2:98:d9:f1:99:b1:60:74:7b:a6:a8:fd:78:
55:68:d8:3b:2d:3c:43:e8:06:93:86:e9:c6:94:b8:
fd:ad:2b:e8:e5:67:62:a4:e4:ce:e2:75:aa:0a:a3:
5c:5d:44:e9:a5:1a:dd:1d:e9:eb:86:9b:a2:6d:1a:
04:06:81:53:1a:11:9c:fa:a1:4a:24:d7:37:3c:66:
b1:4a:ef:74:eb:eb:cc:98:7f:24:66:02:f0:54:92:
d9:f5:cf:84:e1:69:84:62:ff:e6:50:c1:e8:e1:dd:
ae:d9:55:d2:ec:99:42:a7:86:e0:cb:f6:d6:e0:57:
6e:87:cb:17:87:9d:a8:bb:a9:fa:39:ae:83:57:13:
53:a4:6d:ea:86:d3:19:51:d3:59:88:75:65:16:9f:
38:7d:05:53:95:50:01:42:31:74:b6:cb:29:b2:7d:
9e:5d:c4:5c:86:e2:37:81:07:9c:b0:1b:d7:f5:f6:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:01:42:1B:73:0B:26:C6:F6:68:C6:C5:36:DB:2F:F3:B3:FA:A1:1C
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f4:5a:dc:fe:d0:42:0d:c4:5e:7e:a0:45:5b:d3:90:05:2c:
86:61:22:f7:35:f5:62:e1:07:a3:ba:22:63:6f:dd:d3:c3:6e:
ff:1a:c7:d0:ec:30:37:0f:1a:97:90:a1:f2:bf:90:c1:32:df:
db:5c:44:74:9e:f5:ee:3f:9c:6f:e0:35:8b:20:23:b8:8d:07:
63:c5:85:f2:e6:98:63:e4:bc:e3:4e:dc:cf:b8:b1:af:70:eb:
3e:14:38:09:5c:7f:ee:c1:ba:a6:83:28:2d:ca:49:87:97:92:
e8:fa:7f:1e:9b:b1:cd:6a:6a:37:9d:bf:bb:7c:37:62:41:33:
b4:08:3b:1f:de:9a:94:4c:4e:e7:fe:7f:8b:25:8c:22:6f:a3:
17:eb:cb:a0:d0:d2:3f:1f:a5:0e:d0:a1:be:3c:8e:8d:d1:b2:
61:5e:2d:78:e1:18:34:98:46:99:ea:73:0e:ec:c6:95:ed:a5:
82:4f:c1:b3:5a:5b:4b:0a:ff:a9:3c:b1:03:5b:6b:8f:a7:96:
03:e4:79:4e:70:bf:6d:ee:16:9e:ce:fc:35:d4:28:2c:d5:ee:
2e:c5:9f:c0:b2:4e:2f:dc:f7:ab:4a:64:13:bc:33:d0:90:2a:
11:88:b6:d4:a8:e6:10:83:ac:6f:ce:35:37:69:65:e3:00:82:
be:e1:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:23 2025 by rpki-client